Last Modified: Oct 12, 2026
Affected Product(s):
BIG-IP AFM
Known Affected Versions:
17.5.1.8, 17.5.1.9
Opened: Sep 28, 2026 Severity: 2-Critical
On BIG-IP AFM 17.5.1.8, the TCP ACK (TS) vector may classify legitimate timestamped ACKs as invalid and drop them when TS cookies are enabled
False-positive detection causes excessive vector matches, packet drops, and potential throughput degradation
TCP ACK (TS) DoS vector and TS-cookie functionality enabled
Increase the TCP ACK (TS) detection thresholds
None